Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9343e506-e7bd-3bda-8536-b46b2c81a07e.roa
File:                     9343e506-e7bd-3bda-8536-b46b2c81a07e.roa (raw, json)
Hash identifier:          LBLeGeyDV9Qu8+N6vTJWKlMDHWgb9Yh5ApQfAC7XCc0=
Subject key identifier:   AA:4B:67:C1:AB:2F:F1:66:4E:E2:F2:80:AE:69:7A:7E:AE:62:D6:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA7896530923D633D727B8200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9343e506-e7bd-3bda-8536-b46b2c81a07e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33489
IP address blocks:        2601:740::/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:89:65:30:92:3d:63:3d:72:7b:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ba0c6fe2-0b8a-432f-85ce-0e28ec934637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:05:c9:59:7e:eb:41:7e:d1:12:6d:51:c6:46:
                    6b:80:5b:a4:3c:95:b5:38:e1:ca:c2:47:f3:c0:fd:
                    d0:01:07:0c:89:a3:2e:37:1f:13:82:34:bf:73:27:
                    a0:8d:44:17:6c:06:b8:a0:f9:be:15:a2:18:a9:1d:
                    e8:d4:c9:85:d7:25:3a:3b:cc:28:4a:ce:49:29:70:
                    bc:fc:6e:1c:a7:ac:10:8f:b3:4d:6d:03:d2:29:c5:
                    73:05:a4:27:a2:62:42:99:31:cf:e7:f6:67:3d:bf:
                    9b:0e:ab:8e:da:de:81:42:2f:ae:85:83:a6:d8:00:
                    75:05:7c:83:41:a3:c4:7e:eb:d3:19:ee:80:18:1c:
                    7e:f7:85:20:82:6c:60:29:33:ce:3b:1a:f7:2e:2a:
                    6c:83:f8:1f:2e:ac:a2:f4:2c:d6:a8:a6:97:32:1b:
                    a6:93:4c:27:15:d6:03:db:9c:cd:75:c6:4f:78:66:
                    ae:9f:4f:89:bb:42:47:f9:53:ef:7a:fd:06:67:57:
                    b2:5d:36:80:96:bc:67:6d:1f:cb:c0:52:7b:fc:08:
                    d2:d0:a2:ba:7e:16:72:b2:e5:e2:b7:4f:cf:45:3e:
                    90:44:6e:02:73:0d:5b:b5:42:c1:74:8c:cd:a1:b8:
                    b4:d3:2b:5d:50:b8:4c:73:4e:f9:15:c6:9f:50:1f:
                    fb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4B:67:C1:AB:2F:F1:66:4E:E2:F2:80:AE:69:7A:7E:AE:62:D6:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9343e506-e7bd-3bda-8536-b46b2c81a07e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:740::/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:f9:04:90:db:74:72:32:b8:1c:fa:a7:37:c8:a9:5f:38:95:
         21:0d:8e:3d:77:a1:13:c5:12:57:3f:7e:33:d3:91:c1:26:c7:
         1f:92:8b:6a:ff:db:e9:d2:38:0f:6c:79:dd:74:eb:70:2d:22:
         52:0e:ab:33:db:c6:c3:c1:c5:8e:cd:f8:c8:5f:7f:5c:1d:a9:
         7f:30:e0:8f:d0:7b:aa:80:05:09:bf:8c:73:f0:74:fd:69:1d:
         90:be:3f:f4:ec:e2:91:dc:2b:f7:65:b6:b6:ef:8c:41:19:af:
         9b:2b:f0:87:8f:30:63:e1:f7:17:3d:1d:8e:b5:cf:6b:52:23:
         5c:cf:a6:74:c8:bb:52:8d:0d:dd:ad:31:ce:a0:17:92:91:28:
         7d:86:ae:df:88:e0:ba:d9:c7:69:eb:31:43:54:93:98:c3:e7:
         8e:ca:d5:4f:d1:bf:0d:0c:5a:6c:a6:e2:81:28:8f:a7:a1:ac:
         69:6e:ee:00:03:54:c7:39:f9:b9:67:75:a6:cb:0e:0c:a2:3e:
         a8:6a:b9:a0:e0:ec:ad:29:98:0c:7a:d4:ef:cc:d7:98:20:de:
         57:6e:24:6f:10:5c:8b:25:e6:e4:47:01:ec:ab:aa:b0:d6:fb:
         32:58:92:82:f7:4d:63:6d:e5:c3:79:4f:71:51:9d:a0:17:76:
         b0:83:b7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:32:43 2026 by rpki-client